tweak menu / perm labels, again.  Keeping all the UI in the "reports" namespace, even though authentication is handled by the api module